In reply to Michele Butcher.

Michele, did you read my comment above?

This argument about iThemes being innocent in this completely falls apart when their own website is designed so poorly security wise. They have so many issues you can't just ignore them.

There's nothing transparent about running software for 6 years and never informing customers that their passwords are stored in plain text. And there's no way they didn't actually know this for the majority of that time.

If their product uses 3rd party software, it's still part of THEIR product and their responsibility.